CVE-2022-27892

Опубликовано: 16 фев. 2023

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.

Ссылки

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md
Vendor Advisory
https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:palantir:gotham:*:*:*:*:*:*:*:*

Версия до 3.22.11.2 (исключая)

EPSS

Процентиль: 30%

0.0011

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-vvv3-m835-966v

CVSS3: 7.5

github

почти 3 года назад

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.

EPSS

Процентиль: 30%

0.0011

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20